Stay Vigilant with Timely Linux Security Advisories

Loading...

security advisoryfedoraupdate

Fedora 43: kubernetes1.32 Update 2025-00368e9022 Critical Fixes

Update to release v1.32.10 Resolves: rhbz#2414539 Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522 Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058 Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-00368e9022 2025-11-22 01:28:46.754179+00:00 -------------------------------------------------------------------------------- Name : kubernetes1.32 Product : Fedora 43 Version : 1.32.10 Release : 2.fc43 URL : https://github.com/kubernetes/kubernetes Summary : Open Source Production-Grade Container Scheduling And Management Platform Description : Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machines. -------------------------------------------------------------------------------- Update Information: Update to release v1.32.10 Resolves: rhbz#2414539 Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522 Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058 Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730 Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202 Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376 Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803 Upstream fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 12 2025 Bradley G Smith - 1.32.10-1 - Update to release v1.32.10 - Resolves: rhbz#2414539 - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522 - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058 - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730 -Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202 - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376 - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803 - Upstream fixes * Wed Nov 12 2025 Bradley G Smith - 1.32.9-2 - Revise template - Remove transition artifacts - from non-versioned kubernetes - Remove unneeded network rpms - Remove duplicate requires -------------------------------------------------------------------------------- References: [ 1 ] Bug #2398587 - CVE-2025-47910 kubernetes1.32: CrossOriginProtection bypass in net/http [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2398587 [ 2 ] Bug #2398848 - CVE-2025-47910 kubernetes1.32: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398848 [ 3 ] Bug #2399249 - CVE-2025-47906 kubernetes1.32: Unexpected paths returned from LookPath in os/exec [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399249 [ 4 ] Bug #2399522 - CVE-2025-47906 kubernetes1.32: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399522 [ 5 ] Bug #2399703 - CVE-2025-11065 kubernetes1.32: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399703 [ 6 ] Bug #2399721 - CVE-2025-11065 kubernetes1.32: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399721 [ 7 ] Bug #2407788 - CVE-2025-58189 kubernetes1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2407788 [ 8 ] Bug #2408058 - CVE-2025-58189 kubernetes1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2408058 [ 9 ] Bug #2408315 - CVE-2025-58189 kubernetes1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408315 [ 10 ] Bug #2408609 - CVE-2025-61725 kubernetes1.32: Excessive CPU consumption in ParseAddress in net/mail [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2408609 [ 11 ] Bug #2408672 - CVE-2025-61725 kubernetes1.32: Excessive CPU consumption in ParseAddress in net/mail [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2408672 [ 12 ] Bug #2408730 - CVE-2025-61725 kubernetes1.32: Excessive CPU consumption in ParseAddress in net/mail [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408730 [ 13 ] Bug #2409237 - CVE-2025-61723 kubernetes1.32: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2409237 [ 14 ] Bug #2409527 - CVE-2025-61723 kubernetes1.32: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2409527 [ 15 ] Bug #2409788 - CVE-2025-61723 kubernetes1.32: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409788 [ 16 ] Bug #2410202 - CVE-2025-58185 kubernetes1.32: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2410202 [ 17 ] Bug #2410477 - CVE-2025-58185 kubernetes1.32: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2410477 [ 18 ] Bug #2410738 - CVE-2025-58185 kubernetes1.32: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410738 [ 19 ] Bug #2411117 - CVE-2025-58188 kubernetes1.32: Panicwhen validating certificates with DSA public keys in crypto/x509 [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2411117 [ 20 ] Bug #2411376 - CVE-2025-58188 kubernetes1.32: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2411376 [ 21 ] Bug #2411634 - CVE-2025-58188 kubernetes1.32: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411634 [ 22 ] Bug #2412569 - CVE-2025-58183 kubernetes1.32: Unbounded allocation when parsing GNU sparse map [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2412569 [ 23 ] Bug #2412588 - CVE-2025-58183 kubernetes1.32: Unbounded allocation when parsing GNU sparse map [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2412588 [ 24 ] Bug #2412803 - CVE-2025-58183 kubernetes1.32: Unbounded allocation when parsing GNU sparse map [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2412803 [ 25 ] Bug #2414539 - kubernetes1.32-1.34.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2414539 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-00368e9022' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora 43 releases update for kubernetes fixing multiple critical issues. Ensure you're protected with this upgrade now.. Fedora Kubernetes Update 2025 Security. . Severity: Important. LinuxSecurity.com Team

Nov 22, 2025 •Important Fedora

security advisorydenial of servicefedora

Fedora 41: cri-o1.33 Denial of Service Fix 2025-3976569481

Update to release v1.33.5 Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663, rhbz#2399065, rhbz#2399339 Upstream fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-3976569481 2025-10-11 01:01:59.551895+00:00 -------------------------------------------------------------------------------- Name : cri-o1.33 Product : Fedora 41 Version : 1.33.5 Release : 1.fc41 URL : https://github.com/cri-o/cri-o Summary : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface Description : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface. -------------------------------------------------------------------------------- Update Information: Update to release v1.33.5 Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663, rhbz#2399065, rhbz#2399339 Upstream fixes -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 2 2025 Bradley G Smith - 1.33.5-1 - Update to release v1.33.5 - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663, rhbz#2399065, rhbz#2399339 - Upstream fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #2333357 - cri-o-1.34.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333357 [ 2 ] Bug #2375096 - CVE-2025-4437 cri-o1.33: Large /etc/passwd file may lead to Denial of Service [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2375096 [ 3 ] Bug #2398408 - CVE-2025-47910 cri-o1.33: CrossOriginProtection bypass in net/http [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2398408 [ 4 ] Bug #2398663 - CVE-2025-47910 cri-o1.33: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398663 [ 5 ] Bug #2399065 - CVE-2025-47906 cri-o1.33:Unexpected paths returned from LookPath in os/exec [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399065 [ 6 ] Bug #2399339 - CVE-2025-47906 cri-o1.33: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399339 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3976569481' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora 41 updates cri-o1.33 to resolve several issues including DoS threats and upstream fixes. Comprehensive details shared.. Fedora updates, cri-o1.33 fixes, kubernetes container runtime, Denial of Service mitigation, security advisory. . Severity: Important. LinuxSecurity.com Team

Oct 11, 2025 •Important Fedora

security advisoryfedoraimportant

Fedora 42 Kubernetes 1.32.8 Important Node Self-Deletion Risk CVE-2025-5187

Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-9b52dfdae9 2025-08-23 01:11:47.818395+00:00 -------------------------------------------------------------------------------- Name : kubernetes1.32 Product : Fedora 42 Version : 1.32.8 Release : 1.fc42 URL : https://github.com/kubernetes/kubernetes Summary : Open Source Production-Grade Container Scheduling And Management Platform Description : Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machines. -------------------------------------------------------------------------------- Update Information: Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 13 2025 Bradley G Smith - 1.32.8-1 - Update to release v1.32.7 - Resolves: rhbz#2388412 - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference - Upstream fixes * Thu Jul 24 2025 Fedora Release Engineering - 1.32.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2388412 - kubernetes1.32-1.33.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2388412 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2025-9b52dfdae9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . The rollout of version 1.32.7 for Fedora 42 rectifies vulnerability CVE-2025-5187, which affects the management of Kubernetes nodes.. Fedora 42 Kubernetes Update CVE-2025-5187 Container Management. . Severity: Important. LinuxSecurity.com Team

Aug 23, 2025 •Important Fedora

security advisoryFedoracritical update

Fedora 38: 2024-4e36df9dfd Critical Update for pdns-recursor

Update to latest upstream. Fixes CVE-2023-50387 and CVE-2023-50868. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-4e36df9dfd 2024-02-23 01:31:33.257522 -------------------------------------------------------------------------------- Name : pdns-recursor Product : Fedora 38 Version : 4.8.6 Release : 1.fc38 URL : https://www.powerdns.com/ Summary : Modern, advanced and high performance recursing/non authoritative name server Description : PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network. -------------------------------------------------------------------------------- Update Information: Update to latest upstream. Fixes CVE-2023-50387 and CVE-2023-50868 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 14 2024 Sander Hoentjen - 4.8.6-1 - Update to 4.8.6 - Fixes CVE-2023-50387 and CVE-2023-50868 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263914 - CVE-2023-50387 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator https://bugzilla.redhat.com/show_bug.cgi?id=2263914 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4e36df9dfd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . A vital Fedora upgrade tackles significant problems in pdns-recursor, boosting functionality and fortifying security for DNS caching in networks.. Fedora 38, pdns-recursor update, DNS server security, upstream fixes. . Severity: Critical. LinuxSecurity.com Team

Feb 23, 2024 •Critical Fedora

security advisorycritical issuekernel update

Oracle Linux 7: ELSA-2021-9450 Important Critical Kernel Patch Released

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network . Oracle Linux Security Advisory ELSA-2021-9450 https://linux.oracle.com/errata/ELSA-2021-9450.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-5.4.17-2102.205.7.2.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2102.205.7.2.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2102.205.7.2.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2102.205.7.2.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2102.205.7.2.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2102.205.7.2.el7uek.x86_64.rpm aarch64: kernel-uek-5.4.17-2102.205.7.2.el7uek.aarch64.rpm kernel-uek-debug-5.4.17-2102.205.7.2.el7uek.aarch64.rpm kernel-uek-debug-devel-5.4.17-2102.205.7.2.el7uek.aarch64.rpm kernel-uek-devel-5.4.17-2102.205.7.2.el7uek.aarch64.rpm kernel-uek-doc-5.4.17-2102.205.7.2.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2102.205.7.2.el7uek.aarch64.rpm kernel-uek-tools-libs-5.4.17-2102.205.7.2.el7uek.aarch64.rpm perf-5.4.17-2102.205.7.2.el7uek.aarch64.rpm python-perf-5.4.17-2102.205.7.2.el7uek.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/kernel-uek-5.4.17-2102.205.7.2.el7uek.src.rpm Related CVEs: CVE-2020-36311 CVE-2021-22543 CVE-2021-3573 CVE-2021-3609 CVE-2021-3653 CVE-2021-3656 Description of changes: [5.4.17-2102.205.7.2.el7uek] - btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276] [5.4.17-2102.205.7.1.el7uek] - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518] [5.4.17-2102.205.7.el7uek] - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge) [Orabug: 33253169] - vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora) [Orabug: 33200737] [Orabug: 33187733] [5.4.17-2102.205.6.el7uek] - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33241131] - xfs: rename xfs_wait_buftarg() toxfs_buftarg_drain() (Brian Foster) [Orabug: 33241131] - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372379] [5.4.17-2102.205.5.el7uek] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky) [Orabug: 33226010] {CVE-2021-3653} - Revert "KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl" (Liam Merwick) [Orabug: 33226010] {CVE-2021-3653} {CVE-2021-3653} - LTS tag: v5.4.140 (Jack Vogel) - arm64: fix compat syscall return truncation (Mark Rutland) - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren) - alpha: Send stop IPI to send to online CPUs (Prarit Bhargava) - virt_wifi: fix error on connect (Matteo Croce) - reiserfs: check directory items on read from disk (Shreyansh Chouhan) - reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai) - libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig) - bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann) - soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann) - spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu) - soc: ixp4xx: fix printing resources (Arnd Bergmann) - arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon) - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson) - KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini) - KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini) - md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu) - pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma) - timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner) - serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner) - serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko) - MIPS: Malta: Do not byte-swap accessesto the CBUS UART (Maciej W. Rozycki) - serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki) - serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao) - serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter) - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o) - pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71)) - media: rtl28xxu: fix zero-length control request (Johan Hovold) - staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin) - staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang) - tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks) - optee: Fix memory leak when failing to register shm pages (Tyler Hicks) - tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander) - optee: Clear stale cache entries during initialization (Tyler Hicks) - tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware)) - scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su) - clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris) - usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko) - usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev) - usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell) - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev) - usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak) - ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy) - ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov) - firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam) - firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam) - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer) - USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau) - USB: serial:option: add Telit FD980 composition 0x1056 (Daniele Palmas) - USB: usbtmc: Fix RCU stall warning (Qiang.zhang) - Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) {CVE-2021-3573} - blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai) - net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin) - net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin) - net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin) - bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter) - mips: Fix non-POSIX regexp (H. Nikolaus Schaller) - net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart) - nfp: update ethtool reporting of pauseframe control (Fei Qin) - sctp: move the active_key update after sh_keys is added (Xin Long) - gpio: tqmx86: really make IRQ optional (Matthias Schiffer) - net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai) - net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett) - net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean) - net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean) - net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki) - dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis) - media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil) - scsi: sr: Return correct event when media event code is 3 (Li Manyi) - spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut) - spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut) - omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller) - ARM: dts: am437x-l4: fix typo in can@0 node (Dario Binacchi) - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi) - ALSA: usb-audio:fix incorrect clock source setting (chihhao.chen) - arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohár) - ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut) - ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King) - ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov) - ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier) - ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang) - ARM: imx: add missing iounmap() (Yang Yingliang) - arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean) - ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai) - Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki) - LTS tag: v5.4.139 (Jack Vogel) - spi: mediatek: Fix fifo transfer (Guenter Roeck) - bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann) - bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend) - bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend) - bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann) - bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann) - bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann) - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman) - firmware: arm_scmi: Add delayed response status check (Cristian Marussi) - firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla) - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman) - ACPI: fix NULL pointer dereference (Linus Torvalds) - nvme: fix nvme_setup_command metadata trace event (Keith Busch) - net: Fix zero-copy head len calculation. (Pravin B Shelar) - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He) - r8152: Fix potential PM refcount imbalance (Takashi Iwai) - ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell) - spi: stm32h7: fix full duplex irq handler handling (Alain Volmat) - regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin) - btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana) - btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana) - btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana) - btrfs: delete duplicated words + other fixes in comments (Randy Dunlap) - uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar) [Orabug: 33215814] - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil) [Orabug: 33220434] - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil) [Orabug: 33220434] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33235071] {CVE-2021-3656} {CVE-2021-3656} - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33235071] {CVE-2021-3653} {CVE-2021-3653} [5.4.17-2102.205.3.el7uek] - LTS tag: v5.4.138 (Jack Vogel) - can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel) - i40e: Add additional info to PHY type error (Lukasz Cieplicki) - Revert "perf map: Fix dso-> nsinfo refcounting" (Arnaldo Carvalho de Melo) - powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju) - PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan) - can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter) - sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai) - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai) - sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner) - net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak) - net/mlx5: Fix flow table chaining (Maor Gottlieb) - net: llc: fix skb_over_panic (Pavel Skripkin) - mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong) - net: Set true network header for ECN decapsulation (Gilad Naaman) - tipc: fix sleeping in tipc accept routine (Hoang Le) - i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski) - i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski) - i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski) - i40e: Fix logic of disabling queues (Arkadiusz Kubalewski) - netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso) - netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal) - cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi) - nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski) - NIU: fix incorrect error return, missed in previous revert (Paul Jakma) - HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke) - can: esd_usb2: fix memory leak (Pavel Skripkin) - can: ems_usb: fix memory leak (Pavel Skripkin) - can: usb_8dev: fix memory leak (Pavel Skripkin) - can: mcba_usb_start(): add missing urb-> transfer_dma initialization (Pavel Skripkin) - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan) - can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong) - ocfs2: issue zeroout to EOF blocks (Junxiao Bi) - ocfs2: fix zero out valid data (Junxiao Bi) - KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini) - x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross) - Revert "ACPI: resources: Add checks for ACPIIRQ override" (Hui Wang) - btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues) - btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi) - x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka) - net_sched: check error pointer in tcf_dump_walker() (Cong Wang) - LTS tag: v5.4.137 (Jack Vogel) - ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin) - ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla) - iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig) - iomap: remove the length variable in iomap_seek_data (Christoph Hellwig) - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee) - firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi) - firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla) - hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi) - hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi) - hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi) - ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin) - sctp: move 198 addresses from unusable to private scope (Xin Long) - net: annotate data race around sk_ll_usec (Eric Dumazet) - net/802/garp: fix memleak in garp_request_join() (Yang Yingliang) - net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang) - cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker) - workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang) - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) - KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky) - tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include (Yonghong Song) - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (GregKroah-Hartman) - LTS tag: v5.4.136 (Jack Vogel) - xhci: add xhci_get_virt_ep() helper (Mathias Nyman) - perf inject: Close inject.output on exit (Riccardo Mancini) - PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan) - btrfs: compression: don't try to compress if we don't have enough pages (David Sterba) - iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold) - iio: accel: bma180: Use explicit member assignment (Linus Walleij) - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger) - net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behún) - drm: Return -ENOTTY for non-drm ioctls (Charles Baylis) - nds32: fix up stack guard gap (Greg Kroah-Hartman) - rbd: always kick acquire on "acquired" and "released" notifications (Ilya Dryomov) - rbd: don't hold lock_rwsem while running_list is being drained (Ilya Dryomov) - hugetlbfs: fix mount mode command line processing (Mike Kravetz) - userfaultfd: do not untag user pointers (Peter Collingbourne) - selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne) - ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme) - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva) - btrfs: check for missing device in btrfs_trim_fs (Anand Jain) - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) - tracing/histogram: Rename "cpu" to "common_cpu" (Steven Rostedt (VMware)) - firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier) - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan) - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping) - USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray) - USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco) - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda) - usb: max-3421: Prevent corruption offreed memory (Mark Tomlinson) - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski) - usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman) - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman) - KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin) - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin) - xhci: Fix lost USB 2 remote wake (Mathias Nyman) - ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai) - ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai) - ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy) - ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai) - s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov) - s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik) - Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei) - proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri) - drm/panel: raspberrypi-touchscreen: Prevent double-free (Maxime Ripard) - net: sched: cls_api: Fix the the wrong parameter (Yajun Deng) - sctp: update active_key for asoc when old key is being replaced (Xin Long) - nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig) - r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak) - afs: Fix tracepoint string placement with built-in AFS (David Howells) - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin) - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng) - ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni) - net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye) - net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen) - net/tcp_fastopen: fix data races around tfo_active_disable_stamp(Eric Dumazet) - net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap) - bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur) - bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan) - bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan) - spi: cadence: Correct initialisation of runtime PM again (Marek Vasut) - scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov) - scsi: iscsi: Fix iface sysfs attr detection (Mike Christie) - netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi) - net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin) - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin) - KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin) - net: decnet: Fix sleeping inside in af_decnet (Yajun Deng) - efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek) - net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan) - bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser) - bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend) - s390/bpf: Perform r1 range checking before accessing jit-> seen_reg[r1] (Colin Ian King) - liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King) - ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm) - spi: mediatek: fix fifo rx mode (Peter Hess) - regulator: hi6421: Fix getting wrong drvdata (Axel Lin) - regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin) - spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat) - spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi) - spi: imx: add a check for speed_hz before calculating the clock (Clark Wang) - perf data: Close all files in close_dir() (Riccardo Mancini) - perf probe-file: Delete namelist in del_events()on the error path (Riccardo Mancini) - perf lzma: Close lzma stream on exit (Riccardo Mancini) - perf script: Fix memory 'threads' and 'cpus' leaks on exit (Riccardo Mancini) - perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini) - perf test event_update: Fix memory leak of evlist (Riccardo Mancini) - perf test session_topology: Delete session-> evlist (Riccardo Mancini) - perf env: Fix sibling_dies memory leak (Riccardo Mancini) - perf probe: Fix dso-> nsinfo refcounting (Riccardo Mancini) - perf map: Fix dso-> nsinfo refcounting (Riccardo Mancini) - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen) - cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain) - pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped (Uwe Kleine-König) - selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu) - selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu) - ipv6: fix 'disable_policy' for fwd packets (Nicolas Dichtel) - gve: Fix an error handling path in 'gve_probe()' (Christophe JAILLET) - igb: Fix position of assignment to *ring (Jedrzej Jagielski) - igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov) - iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET) - e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET) - fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET) - igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET) - igc: Fix an error handling path in 'igc_probe()' (Christophe JAILLET) - igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin) - ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET) - igc: change default return of igc_read_phy_reg() (Tom Rix) - igb: Fix use-after-free error during reset (Vinicius Costa Gomes) - igc: Fix use-after-free error during reset (Vinicius Costa Gomes) -LTS tag: v5.4.135 (Jack Vogel) - udp: annotate data races around unix_sk(sk)-> gso_size (Eric Dumazet) - perf test bpf: Free obj_buf (Riccardo Mancini) - bpftool: Properly close va_list 'ap' by va_end() on error (Gu Shengxian) - ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet) - tcp: annotate data races around tp-> mtu_info (Eric Dumazet) - dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand) - net: fddi: fix UAF in fza_probe (Pavel Skripkin) - net: validate lwtstate-> data before returning from skb_tunnel_info() (Taehee Yoo) - net: send SYNACK packet with accepted fwmark (Alexander Ovechkin) - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin) - net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin) - net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin) - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu) - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli) - net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller) - net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu) - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin) - net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko) - net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behún) - net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behún) - dm writecache: return the exact table values that were set (Mikulas Patocka) - usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar) - f2fs: Show casefolding support only when supported (Daniel Rosenberg) - arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohár) - firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohár) - arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behún) - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) - s390: introduce proper type handlingcall_on_stack() macro (Heiko Carstens) - sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal) - scsi: qedf: Add check to synchronize abort and flush (Javed Hasan) - scsi: libfc: Fix array index out of bound exception (Javed Hasan) - scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu) - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King) - rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich) - thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang) - arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach) - arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab) - firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding) - soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding) - ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue) - ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue) - ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker) - arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla) - ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue) - ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue) - ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue) - ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) - ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) - kbuild: sink stdout from cmd for silent build (Masahiro Yamada) - rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui) - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer) - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser) - ARM: dts: Hurricane 2:Fix NAND nodes names (Rafał Miłecki) - ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki) - ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki) - ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki) - ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki) - reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel) - arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang) - arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang) - ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang) - ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard) - ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia) - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker) - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker) - ARM: dts: gemini: add device_type on pci (Corentin Labbe) - ARM: dts: gemini: rename mdio to the right name (Corentin Labbe) - LTS tag: v5.4.134 (Jack Vogel) - misc: alcor_pci: fix inverted branch condition (Tong Zhang) - scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter) - MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz) - mips: disable branch profiling in boot/decompress.o (Randy Dunlap) - mips: always link byteswap helpers into decompressor (Arnd Bergmann) - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET) - firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohár) - firmware: turris-mox-rwtm: report failures better (Marek Behún) - firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behún) - thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Söderlund) - ARM: dts:imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier) - ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier) - ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier) - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) - memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski) - memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski) - reset: bail if try_module_get() fails (Philipp Zabel) - ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki) - firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi) - firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei) - ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven) - arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak) - rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter) - memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei) - reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei) - memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski) - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski) - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski) - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski) - ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski) - reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski) - ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe) - hexagon: use common DISCARDS macro (Nathan Chancellor) - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust) - ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei) -nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi) - virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin) - pwm: imx1: Don't disable clocks at device remove time (Uwe Kleine-König) - x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner) - PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle) - PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle) - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng) - nfs: fix acl memory leak of posix_acl_create() (Gao Xiang) - watchdog: aspeed: fix hardware timeout calculation (Tao Ren) - um: fix error return code in winch_tramp() (Zhen Lei) - um: fix error return code in slip_open() (Zhen Lei) - NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust) - power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold) - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński) - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu) - x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) - virtio_console: Assure used length from device is limited (Xie Yongji) - virtio_net: Fix error handling in virtnet_restore() (Xie Yongji) - virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji) - ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede) - ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang) - pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König) - pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei) - power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei) - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei) - NFS: nfs_find_open_context() may only select open files (Trond Myklebust) - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) - orangefs: fix orangefs dfoutput. (Mike Marshall) - PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei) - x86/fpu: Return proper error codes from user access functions (Thomas Gleixner) - watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka) - watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger) - watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei) - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei) - watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei) - PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe) - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers) - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui) - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) - power: supply: ab8500: Avoid NULL pointers (Linus Walleij) - pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König) - power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei) - power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei) - lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov) - i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov) - intel_th: Wait until port is in reset before programming it (Alexander Shishkin) - staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto) - ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett) - ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao) - backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König) - ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart) - powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt) - usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang) - usb: gadget: f_hid: fix endianness issue with descriptors (RuslanBilovol) - ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett) - ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett) - ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett) - ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto) - Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai) - s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens) - s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens) - s390/ipl_parm: fix program check new psw handling (Heiko Carstens) - s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens) - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei) - gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson) - selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev) - ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang) - gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli) - iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang) - iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang) - powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand) - ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai) - selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin) - s390/sclp_vt220: fix console name to match device (Valentin Vidic) - serial: tty: uartlite: fix console setup (Daniel Mack) - ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu) - mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren) - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei) - scsi: qedi: Fix null ref during abort handling (Mike Christie) - scsi: iscsi: Fix shost-> max_id use (Mike Christie) - scsi: iscsi: Fix conn use after free during resets (MikeChristie) - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie) - scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil) - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) - scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil) - fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong) - scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke) - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET) - ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu) - scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry) - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart) - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart) - scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov) - w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio) - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto) - ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) - iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron) - iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron) - misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (Tong Zhang) - misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong) - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun) - srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker) - dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong) - net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang) - fbmem: Do not delete the mode that is still in use (Zhen Lei) - cgroup: verify that source is a string (Christian Brauner) - tracing:Do not reference char * as a string in histograms (Steven Rostedt (VMware)) - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler) - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86-> run() (Lai Jiangshan) - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson) - KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) - LTS tag: v5.4.133 (Jack Vogel) - smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa) - jfs: fix GPF in diFree (Pavel Skripkin) - pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei) - media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung) - media: gspca/sunplus: fix zero-length control requests (Johan Hovold) - media: gspca/sq905: fix control-request direction (Johan Hovold) - media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin) - media: dtv5100: fix control-request directions (Johan Hovold) - media: subdev: disallow ioctl for saa6588/davinci (Arnd Bergmann) - PCI: aardvark: Implement workaround for the readback value of VEND_ID (Pali Rohár) - PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár) - PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (Konstantin Kharlamov) - dm btree remove: assign new_root only when removal succeeds (Hou Tao) - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() (Sai Prakash Ranjan) - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong) - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (Paul Burton) - tracing: Simplify & fix saved_tgids logic (Paul Burton) - rq-qos: fix missed wake-ups in rq_qos_throttle try two (Jan Kara) - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) - extcon: intel-mrfld: Sync hardware and software state on init (Ferry Toth) - nvmem: core: add a missing of_node_put (Christophe JAILLET) - power: supply: ab8500: Fix an old bug (Linus Walleij) - ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) - thermal/drivers/int340x/processor_thermal: Fix tcc setting (Srinivas Pandruvada) - ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu) - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor) - ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko) - MIPS: fix "mipsel-linux-ld: decompress.c:undefined reference to `memmove'" (Gao Xiang) - fpga: stratix10-soc: Add missing fpga_mgr_free() call (Russ Weight) - clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround (Samuel Holland) - cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner) - ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson) - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle) - mmc: core: clear flags before allowing to retune (Wolfram Sang) - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper) - drm/arm/malidp: Always list modifiers (Daniel Vetter) - drm/msm/mdp4: Fix modifier support enabling (Daniel Vetter) - drm/tegra: Don't set allow_fb_modifiers explicitly (Daniel Vetter) - drm/amd/display: Reject non-zero src_y and src_x for video planes (Harry Wentland) - pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz) - drm/amd/display: fix incorrrect valid irq check (Guchun Chen) - drm/rockchip: dsi: remove extra component_del() call (Thomas Hebb) - drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng) - drm/amdgpu: Update NV SIMD-per-CU to 2 (Joseph Greathouse) - powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor) - powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) - perf bench: Fix 2 memory sanitizer warnings (Ian Rogers) - fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers) - MIPS: set mips32r5for virt extensions (Nick Desaulniers) - MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops (zhanglianjie) - sctp: add size validation when walking chunks (Marcelo Ricardo Leitner) - sctp: validate from_addr_param return (Marcelo Ricardo Leitner) - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang) - Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng) - Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu) - Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip. (mark-yw.chen) - net: ip: avoid OOM kills with large UDP sends over loopback (Jakub Kicinski) - media, bpf: Do not copy more entries than user space requested (Sean Young) - wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva) - sfc: error code if SRIOV cannot be disabled (Íñigo Huguet) - sfc: avoid double pci_remove of VFs (Íñigo Huguet) - iwlwifi: pcie: fix context info freeing (Johannes Berg) - iwlwifi: pcie: free IML DMA memory allocation (Johannes Berg) - iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg) - RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang) - vsock: notify server to shutdown when client has pending signal (Longpeng(Mike)) - atm: nicstar: register the interrupt handler in the right place (Zheyu Ma) - atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma) - MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei) - rtl8xxxu: Fix device info for RTL8192EU devices (Pascal Terjan) - drm/amdkfd: Walk through list with dqm lock hold (xinhui pan) - net: sched: fix error return code in tcf_del_walker() (Yang Yingliang) - net: fix mistake path for netdev_features_strings (Jian Shen) - mt76: mt7615: fix fixed-rate tx status reporting (Felix Fietkau) - bpf: Fix up register-based shifts in interpreter to silence KUBSAN (Daniel Borkmann) - cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei) - wl1251: Fixpossible buffer overflow in wl1251_cmd_scan (Lee Gibson) - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren) - xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert) - drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check (Mark Yacoub) - r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (Heiner Kallweit) - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim) - fjes: check return value after calling platform_get_resource() (Yang Yingliang) - drm/amdkfd: use allowed domain for vmbo validation (Nirmoy Das) - drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 (Wesley Chalmers) - drm/amd/display: Release MST resources on switch from MST to SST (Vladimir Stempen) - drm/amd/display: Update scaling settings on modeset (Roman Li) - net: micrel: check return value after calling platform_get_resource() (Yang Yingliang) - net: mvpp2: check return value after calling platform_get_resource() (Yang Yingliang) - net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang) - virtio_net: Remove BUG() to avoid machine dead (Xianting Tian) - ice: set the value of global config lock timeout longer (Liwei Song) - pinctrl: mcp23s08: fix race condition in irq handler (Radim Pavlik) - dm space maps: don't reset space map allocation cursor when committing (Joe Thornber) - RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong) - ipv6: use prandom_u32() for ID generation (Willy Tarreau) - clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko) - clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto) - drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer() (Zou Wei) - igb: handle vlan types with checker enabled (Jesse Brandeburg) - e100: handle eeprom as little endian (Jesse Brandeburg) - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti) - drm/sched: Avoid data corruptions (Andrey Grodzovsky) -drm/virtio: Fix double free on probe failure (Xie Yongji) - reiserfs: add check for invalid 1st journal block (Pavel Skripkin) - drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() (Wang Li) - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior) - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei) - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei) - atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei) - hugetlb: clear huge pte during flush function on mips platform (Bibo Mao) - drm/amd/display: fix use_max_lb flag for 420 pixel formats (Dmytro Laktyushkin) - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko) - drm/vc4: fix argument ordering in vc4_crtc_get_margins() (Dan Carpenter) - drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang) - drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) - drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan) [Orabug: 33186980] [5.4.17-2102.205.2.el7uek] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] [5.4.17-2102.205.1.el7uek] - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348] - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150427] - arm64: mm: kdump: Fix /proc/kcore (Henry Willard) [Orabug: 32570847] [5.4.17-2102.205.0.el7uek] - LTS tag: v5.4.132 (Jack Vogel) - iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel) - mmc: vub3000: fix control-request direction (Johan Hovold) - mmc: block: Disable CMDQ on the ioctl path (Bean Huo) - scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash) - perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo) - selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random(Dave Hansen) - mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin) - mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin) - vfio/pci: Handle concurrent vma faults (Alex Williamson) - arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohár) - serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohár) - serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohár) - powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin) - leds: ktd2692: Fix an error handling path (Christophe JAILLET) - leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei) - configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng) - ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu) - extcon: max8997: Add missing modalias string (Marek Szyprowski) - extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold) - phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET) - phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi) - soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald) - scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei) - mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang) - of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven) - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald) - iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki) - staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos) - staging: rtl8712: fixmemory leak in rtl871x_load_fw_cb (Pavel Skripkin) - staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin) - staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter) - staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter) - iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean) - eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko) - eeprom: idt_89hpesx: Put fwnode in matching case during -> probe() (Andy Shevchenko) - usb: dwc2: Don't reset the core after setting turnaround time (Clément Lassieur) - usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov) - ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' (Christophe JAILLET) - iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam) - s390: appldata depends on PROC_SYSCTL (Randy Dunlap) - visorbus: fix error return code in visorchipset_init() (Zhen Lei) - fsi/sbefifo: Fix reset timeout (Joachim Fenkes) - fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes) - fsi: occ: Don't accept response from un-initialized OCC (Eddie James) - fsi: scom: Reset the FSI2PIB engine for any error (Eddie James) - fsi: core: Fix return of error values on failures (Colin Ian King) - scsi: FlashPoint: Rename si_flags field (Randy Dunlap) - leds: lm3692x: Put fwnode in any case during ->probe() (Andy Shevchenko) - leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behún) - leds: lm3532: select regmap I2C API (Andy Shevchenko) - tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET) - firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET) - char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai) - mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe) - Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei) - ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto) - backlight: lm3630a_bl: Put fwnode in error case during -> probe() (Andy Shevchenko) - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang) - ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang) - iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio:humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron) - iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron) - iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) - iio: adis16400: do not return ints in irq handlers (Nuno Sa) - iio: adis_buffer: do not return ints in irq handlers (Nuno Sa) - mwifiex: re-fix for unaligned accesses (Arnd Bergmann) - tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET) - rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney) - staging: fbtft: Rectify GPIO handling (Andy Shevchenko) - MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li) - RDMA/mlx5: Don't access NULL-cleared mpi pointer (Leon Romanovsky) - net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin) - net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko) - writeback: fix obtain a reference to a freeing memcg css (Muchun Song) - clk: si5341: Update initializationmagic (Robert Hancock) - clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock) - clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea) - clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea) - clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea) - Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz) - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz) - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) - gve: Fix swapped vars when fetching max queues (Bailey Forrest) - bpfilter: Specify the log level for the kmsg message (Gary Lin) - e1000e: Check the PCIm state (Sasha Neftin) - ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet) - ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu) - Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden) - i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski) - i40e: Fix error handling in i40e_vsi_open (Dinghao Liu) - bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej Żenczykowski) - ipv6: exthdrs: do not blindly use init_net (Eric Dumazet) - net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan) - mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih) - ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet) - ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu) - tc-testing: fix list handling (Marcelo Ricardo Leitner) - net/ipv4: swap flow ports when validating source (Miao Wang) - vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet) - pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet) - tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski) - net: sched: add barrier to ensure correct ordering forlockless qdisc (Yunsheng Lin) - vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart) - net: ethernet: ezchip: fix error handling (Pavel Skripkin) - net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin) - net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin) - samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai) - RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson) - netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso) - netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso) - netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso) - RDMA/mlx5: Don't add slave port to unaffiliated list (Leon Romanovsky) - netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin) - ath10k: Fix an error code in ath10k_add_interface() (Yang Li) - brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET) - brcmfmac: correctly report average RSSI in station info (Alvin Šipraga) - brcmfmac: fix setting of station info chains bitmask (Alvin Šipraga) - ssb: Fix error return code in ssb_bus_scan() (Zhen Lei) - wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan O'Donoghue) - ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu) - wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap) - ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang) - ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang) - tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng) - drm: qxl: ensure surf.data is ininitialized (Colin Ian King) - RDMA/rxe: Fix failure during driver load (Kamal Heib) - RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky) - net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko) -ehea: fix error return code in ehea_restart_qps() (Zhen Lei) - drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb) - drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang) - net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang) - clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet) - pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven) - pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven) - net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko) - net: mvpp2: Put fwnode in error case during -> probe() (Andy Shevchenko) - video: fbdev: imxfb: Fix an error message (Christophe JAILLET) - xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca) - dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara) - ocfs2: fix snprintf() checking (Dan Carpenter) - cpufreq: Make cpufreq_online() call driver-> offline() on errors (Rafael J. Wysocki) - ACPI: bgrt: Fix CFI violation (Nathan Chancellor) macros (Dwaipayan Ray) - blk-wbt: make sure throttle is enabled properly (Zhang Yi) - blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi) - extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen) - ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński) - crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu) - spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt) - sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef) - sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort) - sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort) - btrfs: clear log tree recovering status if starting transaction fails (David Sterba) - regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin) - KVM:nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson) - hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck) - hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck) - media: s5p-g2d: Fix a memory leak on ctx-> fh.m2m_ctx (Dillon Min) - arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual) - arm64: consistently use reserved_pg_dir (Mark Rutland) - mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei) - crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong) - crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen) - media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva) - m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap) - media: gspca/gl860: fix zero-length control requests (Johan Hovold) - media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei) - media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter) - media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong) - pata_ep93xx: fix deferred probing (Sergey Shtylyov) - media: rc: i2c: Fix an error message (Christophe JAILLET) - crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET) - evm: fix writing /evm overflow (Mimi Zohar) - pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov) := n' (Josh Poimboeuf) - kbuild: run the checker after the compiler (Luc Van Oostenryck) - sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef) - sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef) - media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap) - pata_rb532_cf: fix deferred probing (Sergey Shtylyov) - sata_highbank: fix deferred probing (Sergey Shtylyov) - crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei) - crypto: ixp4xx - dma_unmap thecorrect address (Corentin Labbe) - media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab) - writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin) - ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann) - kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) - block: fix discard request merge (Ming Lei) - cifs: fix missing spinlock around update to ses-> status (Steve French) - HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke) - ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald) - clocksource: Retry clock read if long delays detected (Paul E. McKenney) - PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang) - EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck) - nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke) - platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong) - block: fix race between adding/removing rq qos and normal IO (Ming Lei) - ACPI: resources: Add checks for ACPI IRQ override (Hui Wang) - ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo) - ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda) - fs: dlm: fix memory leak when fenced (Alexander Aring) - random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald) - fs: dlm: cancel work sync othercon (Alexander Aring) - block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F)) - ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu) - lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald) - hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing) - ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello) - EDAC/ti: Add missingMODULE_DEVICE_TABLE (Bixuan Cui) - HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov) - media: Fix Media Controller API config checks (Shuah Khan) - regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin) - regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang) - KVM: s390: get rid of register asm usage (Heiko Carstens) - lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng) - locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng) - btrfs: disable build on platforms having page size 256K (Christophe Leroy) - btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik) - btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik) - KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh) - drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng) - hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck) - hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck) - media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam) - media: siano: fix device register error path (Mauro Carvalho Chehab) - media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab) - crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel) - mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma) - mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski) - memstick: rtsx_usb_ms: fix UAF (Tong Zhang) - media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu) - Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers) - media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov) - media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma) - media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong) - media: em28xx: Fix possible memoryleak of em28xx struct (Igor Matheus Andrade Torrente) - sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal) - crypto: qat - remove unused macro in FW loader (Jack Xu) - crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu) - media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart) - media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam) - media: cobalt: fix race condition in setting HPD (Hans Verkuil) - media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin) - media: sti: fix obj-$(config) targets (Mauro Carvalho Chehab) - crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui) - hwrng: exynos - Fix runtime PM imbalance on error (Łukasz Stelmach) - regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei) - spi: omap-100k: Fix the length judgment problem (Tian Tao) - spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang) - spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang) - media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab) - media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - spi: Make of_register_spi_device also set the fwnode (Charles Keepax) - fuse: reject internal errno (Miklos Szeredi) - fuse: check connected before queueing on fpq-> io (Miklos Szeredi) - fuse: ignore PG_workingset after stealing (Miklos Szeredi) - evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded (Roberto Sassu) - evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu) - powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi() (Michael Ellerman) - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou) - tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware)) - tracing/histograms: Fix parsing of "sym-offset" modifier (Steven Rostedt (VMware)) - rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey) - rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut) - ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch) - ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár) - serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary) - serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary) - serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda) - serial: mvebu-uart: fix calculation of clock divisor (Pali Rohár) - iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang) - iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang) - iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde) - iio: light: tcs3472: do not free unallocated IRQ (frank zago) - rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey) - s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan) - KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor) - perf/smmuv3: Don't trample existing events with global filter (Robin Murphy) - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) - mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau) - can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean) - can: j1939: j1939_sk_init():set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) - can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp) - ext4: fix avefreec in find_group_orlov (Pan Dong) - ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi) - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi) - ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang) - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam) - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi) - btrfs: clear defrag status of a root if starting transaction fails (David Sterba) - btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana) - ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches) - arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong) - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) - iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro) - copy_page_to_iter(): fix ITER_DISCARD case (Al Viro) - ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi) - xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing)) - usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng) - usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan) - USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen) - usb: gadget: eem: fix echo command packet response issue (Linyu Yuan) - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin) - Input: usbtouchscreen - fix control-request directions (Johan Hovold) - media: dvb-usb: fix wrong definition (Pavel Skripkin) - ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai) - ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai) - ALSA: hda/realtek:Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito) - ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai) - ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai) - ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai) - ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai) - ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung) - LTS tag: v5.4.131 (Jack Vogel) - xen/events: reset active flag for lateeoi events later (Juergen Gross) - KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) - s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens) - KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes) {CVE-2020-36311} - LTS tag: v5.4.130 (Jack Vogel) - RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch) - gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg) - drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König) - scsi: sr: Return appropriate error code when disk is ejected (ManYi Li) - LTS tag v5.4.129 (Jack Vogel) - x86/efi: move common keyring handler functions to new file (Nayna Jain) - certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) - mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins) - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins) - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins) - mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins) - mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins) - mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins) - mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins) - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins) - mm: page_vma_mapped_walk(): use pmde for *pvmw-> pmd (Hugh Dickins) - mm: page_vma_mapped_walk(): settle PageHuge on entry (HughDickins) - mm: page_vma_mapped_walk(): use page for pvmw-> page (Hugh Dickins) - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi) - mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins) - mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang) - mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins) - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins) - mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins) - mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins) - mm, thp: use head page in __migration_entry_wait() (Xu Yu) - mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin) - mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin) - mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi) - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) - kthread_worker: split code for canceling the delayed work timer (Petr Mladek) - i2c: robotfuzz-osif: fix control-request directions (Johan Hovold) - KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) {CVE-2021-22543} - nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin) - pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne) - net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal) - net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal) - PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski) - recordmcount: Correct st_shndx handling (Peter Zijlstra) - net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook) - KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba) - r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) - sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) - r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) -net/packet: annotate accesses to po-> ifindex (Eric Dumazet) - net/packet: annotate accesses to po-> bind (Eric Dumazet) - net: caif: fix memory leak in ldisc_open (Pavel Skripkin) - net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri) - inet: annotate date races around sk-> sk_txhash (Eric Dumazet) - ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun) - net: ethtool: clear heap allocations for ethtool function (Austin Kim) - mac80211: drop multicast fragments (Johannes Berg) - net: ipv4: Remove unneed BUG() function (Zheng Yongjun) - dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet) - dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet) - dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet) - dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei) - cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng) - mac80211_hwsim: drop pending frames on stop (Johannes Berg) - dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai) - Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki) - spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen) - MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor) - arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers) - kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen) - mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong) - ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann) - drm/radeon: wait for moving fence after pinning (Christian König) - drm/nouveau: wait for moving fence after pinning v2 (Christian König) - Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." (Yifan Zhang) - Revert "drm/amdgpu/gfx9: fix the doorbell missing when inCGPG issue." (Yifan Zhang) - module: limit enabling module.sig_enforce (Mimi Zohar) - mac80211: remove warning in ieee80211_get_sband() (Johannes Berg) [Orabug: 33171088] - platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada) [Orabug: 33126078] - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114646] {CVE-2021-3609} . Recent Oracle Linux 7 updates have been released to tackle significant security threats and kernel flaws. Information regarding the patches and security advisories is detailed below.. Oracle Linux, Kernel Updates, Security Advisory, Patches. . Severity: Important. LinuxSecurity.com Team

Sep 16, 2021 •Important Oracle

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Explore Latest Linux Security advisories

Fedora 43: kubernetes1.32 Update 2025-00368e9022 Critical Fixes

Fedora 41: cri-o1.33 Denial of Service Fix 2025-3976569481

Fedora 42 Kubernetes 1.32.8 Important Node Self-Deletion Risk CVE-2025-5187

Fedora 38: 2024-4e36df9dfd Critical Update for pdns-recursor

Oracle Linux 7: ELSA-2021-9450 Important Critical Kernel Patch Released

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!